转3个[MD5: C82361 E01463 FB7CFA]

显示全部楼层 · 发表于 2007-10-19 18:26:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Deepin\桌面\样本3.rar'
C:\Documents and Settings\Deepin\桌面\样本3.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 3.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-19 18:28:52

红伞C

Begin scan in 'C:\Download\样本3.rar'
C:\Download\样本3.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-19 18:32:47

C:\ABC\样本3.rar:\1.exe - 可疑代码段被发现 (Level: 125)
C:\ABC\样本3.rar:\2.exe - 特征码 'Virus.Win32.Agent.MEQ' 被发现
C:\ABC\样本3.rar:\3.exe
C:\ABC\样本3.rar

4 文件被扫描
(1 压缩档 3 文件)
1 特征码被侦测
1 可疑代码段被发现
耗时: 0:00.157

显示全部楼层 · 发表于 2007-10-19 20:09:40

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.VB.yil

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.14.42

显示全部楼层 · 发表于 2007-10-19 21:27:11

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\3.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ALL USERS\「开始」菜单\程序\启动\SYSTEM.EXE
是否删除木马程序及其衍生物?

SUBMIT 1 和2

显示全部楼层 · 发表于 2007-10-19 23:30:30

detected: Trojan program Trojan-PSW.Win32.Magania.bch File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾3.rar/1.exe
detected: adware not-a-virus:AdWare.Win32.Zhongsou.o File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾3.rar/2.exe

显示全部楼层 · 发表于 2007-10-19 23:59:21

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\样本3.rar'
C:\Users\morgan\Documents\
  样本3.rar
[0] Archive type: RAR
--> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> 2.exe
--> 3.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-20 00:22:33

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 598
Paranoia Database - 40889
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\1.exe - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\2.exe - Infected Generic.Malware.118784.5e2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\3.exe - Suspected MalwareDetector:Generic.PSW.27

3 Files scanned
1 Infected files found
1 Suspected files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-10-20 11:19:04

驱逐舰pass2个，报了一个Trojan.DownLoader.35881

显示全部楼层 · 发表于 2007-10-20 11:48:37

[病毒样本] 转3个[MD5: C82361 E01463 FB7CFA]

NOD32 MISS

4/1

本帖子中包含更多资源

浏览过的版块